Information System Security Engineer (ISSE) Team Lead

Job Description

Description:

Job Title: Information System Security Engineer (ISSE) Team Lead (Navy RMF / Cybersecurity)

Place of Performance: Hybrid Washington, DC 20392

Mandatory Requirements: Top Secret Clearance with SCI Eligibility

Experience Level: 8+ years applicable experience

About JFL Consulting:

With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients.

Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit

What We Offer:

· Salary range $150k-$165k

· Hybrid work schedule 2 days remote/3 days on-site

· Free on-site parking in Washington, DC

· 100% employer-paid medical, dental, and vision premiums for employees and dependents

· Flexible Spending Accounts (healthcare, dependent care, and commuter)

· Life insurance, short-term disability and long-term disability

· 401(k) with immediate vesting of company contribution

· Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)Requirements:

We are seeking a hands-on ISSE Team Lead to support cybersecurity and Risk Management Framework (RMF) activities for Navy systems and programs. This role leads system security engineering, authorization (ATO) efforts, and continuous monitoring in compliance with DoD and Department of the Navy (DON) cybersecurity policies.

The ideal candidate has strong experience with eMASS, STIG implementation, RMF lifecycle management, and DoD security authorization processes, along with the ability to communicate cybersecurity risk to leadership.

Key Responsibilities

Lead cybersecurity and RMF activities across Navy systems throughout the full lifecycle

Develop and maintain System Security Plans (SSPs) and ATO/Security Authorization Packages

Manage systems in eMASS, including artifact management and RMF workflow execution

Define and implement security controls, baselines, and overlays (NIST SP 800-53)

Conduct Security Control Assessments (SCA) support and validation activities

Ensure compliance with DoD, DON, NIST, and STIG security requirements

Manage POA&M tracking, vulnerability remediation, and risk mitigation activities

Support continuous monitoring (FISMA) and annual security reviews

Integrate penetration test and assessment findings into RMF documentation and risk tracking

Validate user access and ensure clearance/training compliance

Brief leadership on system security posture and risk

Required Qualifications

8+ years of cybersecurity / RMF experience (Navy or DoD preferred)

Experience supporting DoD system authorization (ATO) efforts

Strong knowledge of RMF, NIST SP 800-53, STIGs, and DoD cybersecurity policies

Hands-on experience with eMASS (required)

Experience with SCAP Compliance Checker (SCC) and STIG Viewer

Experience with vulnerability management and POA&M tracking

Background in Windows and Linux system security hardening

Experience in ISSE, ISSO, ISSM, or related cybersecurity engineering roles

Ability to communicate technical risk to leadership

Preferred Qualifications

Prior Navy or DON cybersecurity experience

Experience supporting authorization boards and greenfield system deployments

Experience integrating penetration test results into RMF processes

Leadership or team lead experience in cybersecurity environments

Strong secure system architecture background

Certifications

DoD 8140 / 8570 IAT Level II required (e.g., Security+, CySA+, GCIH, CISSP)

CISSP or CASP+ preferred

Education

Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field preferred

Equivalent experience may be considered

Full-time

Hybrid remote